CVE-2026-4104

Authorization bypass through User-Controlled SQL primary key vulnerability in Akmer Informatics Automation Industry and Trade Ltd. Co. TeknoPass allows SQL Injection. This issue affects TeknoPass: from 20210501 through 20260429.

• CWE-89

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0309

Published

Jun 4, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-41034ONLYOFFICE DocumentServer before 9.3.0 has an untrusted poin…5
• CVE-2026-41035In rsync 3.0.1 through 3.4.1, receive_xattr relies on an unt…7.8
• CVE-2026-41036This vulnerability exists in Quantum Networks router due to …8.8
• CVE-2026-41037This vulnerability exists in Quantum Networks router due to …8.8
• CVE-2026-41038This vulnerability exists in Quantum Networks router due to …8.8
• CVE-2026-41039This vulnerability exists in Quantum Networks router due to …7.5
• CVE-2026-41040GROWI provided by GROWI, Inc. is vulnerable to a regular exp…8.7
• CVE-2026-41041URL path injection via unencoded user-supplied identifiers v…9.1
• CVE-2026-41042Unauthenticated callers can supply a malicious H2 JDBC URL t…9.1
• CVE-2026-41043Improper Neutralization of Script-Related HTML Tags in a Web…6.5
• CVE-2026-41044Improper Input Validation, Improper Control of Generation of…8.8
• CVE-2026-41045A time-to-check-time-of-use in polkit authentication of qSna…7